CVE-2023-43697: Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load...
6.5
CVSS
Description
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an
unprivileged remote attacker to make the site unable to load necessary strings via changing file paths
using HTTP requests.
Classification
CVE ID: CVE-2023-43697
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
Affected Products
Vendor: SICK AG
Product: APU0200
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.19% (probability of being exploited)
EPSS Percentile: 56.4% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://sick.com/psirthttps://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json